CRITICAL 9.8 NuGet
Missing Authorization in FastReport
GHSA-v726-3vg9-cp34 · CVE-2020-27998
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle (for example) GetType, typeof, TypeOf, DllImport, LoadLibrary, and GetProcAddress.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-27998
- WEB https://github.com/FastReports/FastReport/pull/206
- WEB https://github.com/FastReports/FastReport/compare/v2020.3.0...v2020.4.0
- WEB https://opensource.fast-report.com/2020/09/report-script-security.html
- ADVISORY https://securitylab.github.com/advisories/GHSL-2020-143-FastReportsInc-FastReports
Ready to move
Start Securing
Free, no credit card | First findings in minutes